Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
Priority LOW 29CWE-285Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-285.
Summary
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to force the system to share a file with approvers. This results in an authorization bypass and privilege escalation, allowing unauthorized distribution of restricted files. This issue has been patched in version 2.7.2.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00358 29th percentileScored 2026-11-07
Fix Fixed security-advisories (nextcloud): 2.7.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA security-advisories (nextcloud) Fixed in 2.7.2
Timeline
- 2026-10-02 Threatist record created from CVE-2026-45275
References
More nextcloud Approval vulnerabilities
- TI-2026-33078 Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations CVSS 3.1LOW 3.3
- TI-2025-40937 Nextcloud Approval app allows users to request approval for other users file CVSS 3.1LOW 2.7
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences